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Agreement between 
the Government of the United States of America 
and 

the Government of the Republic of Estonia 

On Enhancing Cooperation in 
Preventing and Combating Serious Crime 

The Government of the United States of America and the Government of the Republic of 
Estonia (hereinafter "Parties"), 

Prompted by the desire to cooperate as partners to prevent and combat serious crime, 
including terrorism, more effectively, 

Recognizing that information sharing is an essential component in the fight against 
serious crime, including terrorism, 

Recognizing the importance of preventing and combating serious crime, including 
terrorism, while respecting fundamental rights and freedoms, notably privacy, 

Following the example of the Treaty of Priim on enhancing cross-border cooperation, 
and 

Seeking to enhance and encourage cooperation between the Parties in the spirit of 
partnership, 

Have agreed as follows: 

Article 1 
Definitions 

For the purposes of this Agreement, 

1. Criminal justice purpose shall include activities defined as the administration of 
criminal justice, which means the performance of any of the following activities: 
detection, apprehension, detention, pretrial release, post-trial release, prosecution, 
adjudication, correctional supervision, or rehabilitation activities of accused persons 
or criminal offenders. The administration of criminal justice also includes criminal 
identification activities. 

2. DNA profiles (DNA identification patterns) shall mean a letter or numerical' code 
representing a number of identifying features of the non-coding part of an analyzed 
human DNA sample, i.e. of the specific chemical form at the various DNA loci. 

3. Personal data shall mean any information relating to an identified or identifiable 
natural person (the "data subject"). 

4. Processing of personal data shall mean any operation or set of operations which is 
performed upon personal data, whether or not by automated means, such as 



collection, recording, organization, storage, adaptation or alteration, sorting, 
retrieval, consultation, use, disclosure by supply, dissemination or otherwise making 
available, combination or alignment, blocking, or deletion through erasure or 
destruction of personal data. 

5. Reference data shall mean a DNA profile and the related reference (DNA reference 
data) or fingerprinting data and the related reference (fingerprinting reference data). 
Reference data must not contain any data from which the data subject can be directly 
identified. Reference data not traceable to any individual (untraceables) must be 
recognizable as such. 

6. Serious crimes shall mean, for purposes of implementing this Agreement, conduct 
constituting an offense punishable by a maximum deprivation of liberty of more than 
one year or a more serious penalty. To ensure compliance with their national laws, 
the Parties may agree to specify particular serious crimes for which a Party shall 
supply personal data as described in Articles 6 and 9 of the Agreement. 

a. For the United States, serious crimes shall be deemed also to include any 
criminal offense that would render an individual inadmissible to or removable 
from the United States under U.S. federal law. 

Article 2 
Purpose of this Agreement 

The purpose of this Agreement is to enhance the cooperation between the United States 
and Estonia in preventing and combating serious crime. 

Article 3 
Fingerprinting data 

For the purpose of implementing this Agreement, the Parties shall ensure the availability 
of reference data from the file for the national fingerprint identification systems or, as 
may be required under this Agreement, appropriate data from other relevant systems 
established for the prevention and investigation of criminal offenses or other criminal 
justice purposes. Reference data shall only include fingerprinting data and a reference. 

Article 4 

Automated searching of fingerprint data 

1. For the prevention and investigation of serious crime, each Party shall allow the 
other Party's national contact points, as referred to in Article 7, to conduct searches 
through the national fingerprint identification system or systems by comparing 
fingerprinting data with reference data. Search powers may be exercised only in 
individual cases and in compliance with the searching Party's national law. 

2. Firm matching of fingerprinting data with reference data held by the Party in charge 
of the file shall be carried out by the requested national contact points by means of 
the supply of the reference data required for a clear match. 



Article 5 

Alternative means to search using identifying data 

1 . With regard to the search powers in Article 4, Estonia shall provide an alternative 
means to conduct a search using other identifying data to determine a clear match 
linking the individual to additional data. Search powers shall be exercised in the 
same manner as provided in Article 4 and a clear match shall be treated the same as a 
firm match of fingerprinting data to allow for the supply of additional data as 
provided for in Article 6. 

2. The search powers provided for under this Agreement shall be used only for a 
criminal justice purpose, which shall apply at the border when an individual for 
whom the additional data is sought has been identified for further inspection. 

Article 6 

Supply of further personal and other data 

Should the procedure referred to in Article 4 show a match between fingerprinting data, 
the supply of any available further personal data and other data relating to the reference 
data shall be governed by the national law, including the legal assistance rules, of the 
requested Party. 

Article 7 

National contact points and implementing agreements 

1 . For the purpose of the supply of data as referred to in Articles 4 and 5, each Party 
shall designate one or more national contact points. The powers of the contact points 
shall be governed by the national law applicable. 

2. The technical and procedural details for the searching conducted pursuant to Articles 
4 and 5 shall be set forth in one or more implementing agreements or arrangements. 

Article 8 

Automated searching of DNA profiles 

1 . If permissible under the national law of both Parties and on the basis of reciprocity, 
the Parties may allow each other's national contact point, as referred to in Article 10, 
access to the reference data in their DNA analysis files, with the power to conduct 
automated searches by comparing DNA profiles for the investigation of serious 
crime. Searches may be exercised only in individual cases and in compliance with 
the searching Party's national law. 

2. Should an automated search show that a DNA profile supplied matches a DNA 
profile entered in the other Party's file, the searching national contact point shall 
receive by automated notification the reference data for which a match has been 
found. If no match can be found, automated notification of this shall be given. 

Article 9 

Supply of further personal and other data 

Should the procedure referred to in Article 8 show a match between DNA profiles, the 
supply of any available further personal data and other data relating to the reference data 



shall be governed by the national law, including the legal assistance rules, of the 
requested Party. 

Article 10 

National contact point and implementing agreements 

1 . For the purposes of the supply of data as set forth in Article 8, each Party shall 
designate a national contact point. The powers of the contact point shall be governed 
by the national law applicable. 

2. The technical and procedural details for the searching conducted pursuant to Article 
8 shall be set forth in one or more implementing agreements or arrangements. 

Article 11 

Supply of personal and other data in order to prevent 
and combat serious crime, including terrorism 

1 . For the prevention and combating of serious crime, including terrorism, the Parties 
may, in compliance with their respective national law, in individual cases, even 
without being requested to do so, supply the other Party's relevant national contact 
point, as referred to in paragraph 6, with the personal data specified in paragraph 2, 
in so far as is necessary because particular circumstances give reason to believe that 
the data subjects): 

a. will commit or has committed a serious criminal offense, or participates in an 
organized criminal group or association, or 

b. will commit or has committed terrorist or terrorism related offenses, or offenses 
related to a terrorist group or association, as those offenses are defined under the 
supplying Party's national law, or 

c. is undergoing or has undergone training to commit the offenses referred to in 
subparagraph (b). 

2. The personal data to be supplied shall include, if available, surname, first names, 
former names, other names, aliases, alternative spelling of names, sex, date and place 
of birth, current and former nationalities, passport number, numbers from other 
identity documents, and fingerprinting data, as well as a description of any 
conviction or of the circumstances giving rise to the belief referred to in paragraph 1 . 

3. The supplying Party may, in compliance with its national law, impose conditions on 
the use made of such data by the receiving Party. If the receiving Party accepts such 
data, it shall be bound by any such conditions. 

4. Generic restrictions with respect to the legal standards of the receiving Party for 
processing personal data may not be imposed by the transmitting Party as a condition 
under paragraph 3 to providing data. 

5. In addition to the personal data referred to in paragraph 2, the Parties may provide 
each other with non-personal data related to the offenses set forth in paragraph 1 . 

6. Each Party shall designate one or more national contact points for the exchange of 
personal and other data under this Article with the other Party's contact points. The 



powers of the national contact points shall be governed by the national law 
applicable. 

Article 12 
Privacy and Data Protection 

1. The Parties recognize that the handling and processing of personal data that they 
acquire from each other is of critical importance to preserving confidence in the 
implementation of this Agreement. 

2. The Parties commit themselves to processing personal data fairly and in accord with 
their respective laws and: 

a. ensuring that the personal data provided are adequate and relevant in relation to 
the specific purpose of the transfer; 

b. retaining personal data only so long as necessary for the specific purpose for 
which the data were provided or further processed in accordance with this 
Agreement; and 

c. ensuring that possibly inaccurate personal data are timely brought to the attention 
of the receiving Party in order that appropriate corrective action is taken. 

3. This Agreement shall not give rise to rights on the part of any private person, 
including to obtain, suppress, or exclude any evidence, or to impede the sharing of 
personal data. Rights existing independently of this Agreement, however, are not 
affected. 

Article 13 

Additional Protection for Transmission of Special Categories of Personal Data 

1 . Personal data revealing racial or ethnic origin, political opinions or religious or other 
beliefs, trade union membership or concerning health and sexual life may only be 
provided if they are particularly relevant to the purposes of this Agreement. 

2. The Parties, recognizing the special sensitivity of the above categories of personal 
data, shall take suitable safeguards, in particular appropriate security measures, in 
order to protect such data. 

Article 14 

Limitation on processing to protect personal and other data 

1. Without prejudice to Article 1 1, paragraph 3, each Party may process data obtained 
under this Agreement: 

a. for the purpose of its criminal investigations; 

b. for preventing a serious threat to its public security; 

c. in its non-criminal judicial or administrative proceedings directly related to 
investigations set forth in subparagraph (a); or 

d. for any other purpose, only with the prior consent of the Party which has 
transmitted the data. 



2. The Parties shall not communicate data provided under this Agreement to any third 
State, international body or private person or entity without the consent of the Party 
that provided the data and without the appropriate safeguards. 

3. A Party may conduct a search of the other Party's fingerprint or DNA files under 
Articles 4 or 8, and process data received in response to such a search, including the 
communication whether or not a hit exists, solely in order to: 

a. establish whether the compared DNA profiles or fingerprint data match; 

b. prepare and submit a follow-up request for assistance in compliance with 
national law, including the legal assistance rules, if those data match; or 

c. conduct record-keeping, as required or permitted by its national law. 

The Party administering the file may process the data supplied to it by the searching 
Party during the course of a search in accordance with Articles 4 and 8 solely where this 
is necessary for the purposes of comparison, providing replies to the search or record- 
keeping pursuant to Article 16. The data supplied for comparison shall be deleted 
immediately following replies to searches unless further processing is necessary for the 
purposes mentioned under this Article, paragraph 3, subparagraphs (b) or (c). 

Article 15 

Correction, blockage and deletion of data 

1 . At the request of the supplying Party, the receiving Party shall be obliged to correct, 
block, or delete, consistent with its national law, data received under this Agreement 
that is incorrect or incomplete or if its collection or further processing contravenes 
this Agreement or the rules applicable to the supplying Party. 

2. Where a Party becomes aware that data it has received from the other Party under 
this Agreement is not accurate, it shall take all appropriate measures to safeguard 
against erroneous reliance on such data, which shall include in particular 
supplementation, deletion, or correction of such data. 

3. Each Party shall notify the other if it becomes aware that material data it has 
transmitted to the other Party or received from the other Party under this Agreement 
is inaccurate or unreliable or is subject to significant doubt. 

Article 16 
Documentation 

1. Each Party shall maintain a record of the transmission and receipt of data 
communicated to the other Party under this Agreement. This record shall serve to: 

a. ensure effective monitoring of data protection in accordance with the national 
law of the respective Party; 

b. enable the Parties to effectively make use of the rights granted to them according 
to Articles 15 and 19; and 

c. ensure data security. 



2. The record shall include: 

a. information on the data supplied; 

b. the date of supply; and 

c. the recipient of the data in case the data are supplied to other entities. 

3. The recorded data must be protected with suitable measures against inappropriate use 
and other forms of improper use and must be kept for two years. After the 
conservation period the recorded data must be deleted immediately, unless this is 
inconsistent with national law, including applicable data protection and retention 
rules. 

Article 17 
Data Security 

1. The Parties shall ensure that the necessary technical measures and organizational 
arrangements are utilized to protect personal data against accidental or unlawful 
destruction, accidental loss or unauthorized disclosure, alteration, access or any 
unauthorized form of processing. The Parties in particular shall reasonably take 
measures to ensure that only those authorized to access personal data can have access 
to such data. 

2. The implementing agreements or arrangements that govern the procedures for 
searches of fingerprint and DNA files pursuant to this Agreement shall provide: 

a. that appropriate use is made of modern technology to ensure data protection, 
security, confidentiality and integrity; 

b. that encryption and authorization procedures recognized by the competent 
authorities are used when having recourse to generally accessible networks; and 

c. for a mechanism to ensure that only permissible searches are conducted. 

Article 18 

Transparency - Providing information to the data subjects 

1. Nothing in this Agreement shall be interpreted to interfere with the Parties' legal 
obligations, as set forth by their respective laws, to provide data subjects with 
information as to the purposes of the processing and the identity of the data 
controller, the recipients or categories of recipients, the existence of the right of 
access to and the right to rectify the data concerning him or her and any further 
information such as the legal basis of the processing operation for which the data are 
intended, the time limits for storing the data and the right of recourse, in so far as 
such further information is necessary, having regard for the purposes and the specific 
circumstances in which the data are processed, to guarantee fair processing with 
respect to data subjects. 

2. Such information may be denied in accordance with the respective laws of the 
Parties, including if providing this information may jeopardize: 

a. the purposes of the processing; 



b. investigations or prosecutions conducted by the competent authorities in the 
United States or by the competent authorities in Estonia; or 

c. the rights and freedoms of third parties. 

Article 19 
Information 

Upon request, the receiving Party shall inform the supplying Party of the processing of 
supplied data and the result obtained. The receiving Party shall ensure that its answer is 
communicated to the supplying Party in a timely manner. 

Article 20 
Relation to Other Agreements 

Nothing in this Agreement shall be construed to limit or prejudice the provisions of any 
treaty, other agreement, working law enforcement relationship, or domestic law allowing 
for information sharing between the United States and Estonia. 

Article 21 
Consultations 

1. The Parties shall consult each other regularly on the implementation of the 
provisions of this Agreement. 

2. In the event of any dispute regarding the interpretation or application of this 
Agreement, the Parties shall consult each other in order to facilitate its resolution. 

Article 22 
Expenses 

Each Party shall bear the expenses incurred by its authorities in implementing this 
Agreement. In special cases, the Parties may agree on different arrangements. 

Article 23 
Termination of the Agreement 

This Agreement may be terminated by either Party with three months' notice in writing 
to the other Party. The provisions of this Agreement shall continue to apply to data 
supplied prior to such termination. 

Article 24 
Amendments 

1. The Parties shall enter into consultations with respect to the amendment of this 
Agreement at the request of either Party. 

2. This Agreement may be amended by written agreement of the Parties at any time. 

Article 25 
Entry into force 

This Agreement shall enter into force, with the exception of Articles 8 through 10, on the 
date of the later note completing an exchange of diplomatic notes between the Parties 
indicating that each has taken any steps necessary to bring the agreement into force. 



Articles 8 through 1 0 of this Agreement shall enter into force following the conclusion 
of the implementing agreement s) or arrangement(s) referenced in Article 10 and on the 
date of the later note completing an exchange of diplomatic notes between the Parties 
indicating that each Party is able to implement those articles on a reciprocal basis. This 
exchange shall occur if the laws of both Parties permit the type of DNA screening 
contemplated by Articles 8 through 10. 

Done at Washington, this of t^*<%i^2008, in duplicate in the Estonian and 

English languages, both texts being equally authentic. 



FOR THE GOVERNMENT OF FOR THE GOVERNMENT OF 

THE UNITED STATES OF AMERICA : THE REPUBLIC OF ESTONIA: 




Ameerika Uhendriikide valitsuse 
ja 

Eesti Vabariigi valitsuse 
vaheline 

raskete kuritegudega voitlemisel ja nende ennetamisel 
tehtava koostoo tdhustamise kokkulepe 

Ameerika Uhendriikide valitsus ja Eesti Vabariigi valitsus (edaspidi pooled), 

ajendatuna soovist teha partneritena koostood, et tohusamalt voidelda raskete kuritegude, 
sealhulgas terrorismi vastu, ja neid ennetada; 

tunnistades, et teabe jagamine on raskete kuritegude, sealhulgas terrorismi vastu voitlemise 
oluline osa; 

tunnistades, et tahtis on ennetada raskeid kuritegusid, sealhulgas terrorismi, ning nende 
vastu voidelda, austades sealjuures pdhidigusi ja -vabadusi, eelkoige eraelu puutumatust; 

jargides piiriulese koostoo tohustamise Prtimi lepingu eeskuju ning 

piiudes tugevdada ja ergutada pooltevahelist koostood partnerluse vaimus, 

on kokku leppinud jargmises. 

Artikkel 1 
Moisted 

Kokkuleppes kasutatakse jargmisi moisteid: 

1. Kriminaaloiguse eesmargil - holmab tegevusi, mida maaratletakse kui oigusemoistmist 
kriminaalasjades, mis tahendab ukskoik millist jargmist tegevust: suudistatavate isikute 
voi kurjategijate avastamine, tabamine, kinnipidamine, kohtueelne vabastamine, 
kohtuistungi jargne vabastamine, kohtu alia andmine, kohtumoistmine, kinnipeetavate ja 
tingimisi vabastatute jarelevalve voi rehabilitatsioon. Oigusemoistmine kriminaalasjades 
holmab ka kriminaalasjadega seotud tuvastustoimingud. 

2. DNA-proflil (DNA triipkood) - tahe- voi numbrikood, mis valjendab inimese 
analuusitud DNA proovi mittekodeeriva osa identifitseerimistunnuseid, st DNA 
erinevate piirkondade (lookuste) spetsiifilist keemilist vormi. 

3. Isikuandmed - igasugune teave tuvastatud voi tuvastatava fuiisilise isiku (edaspidi 
andmesubjekt) kohta. 

4. Isikuandmete tootlemine - isikuandmetega tehtav toiming voi toimingute kogum, 
olenemata sellest, kas see on automatiseeritud voi mitte, naiteks andmete kogumine, 
salvestamine, korrastamine, sailitamine, kohandamine voi muutmine, sorteerimine, 
valjavotete tegemine, vaatamine, kasutamine, juurdepaasu voimaldamine andmetele 
edastamise teel, levitamine voi muul moel kattesaadavaks tegemine, iihitamine voi 
iihendamine, sulgemine, kustutamine v5i havitamine. 



5. Viiteandmed - DNA-profiil ja asjakohane viide (DNA viiteandmed) voi sormejalgede 
andmed ja asjakohane viide (sormejalgede viiteandmed). Viiteandmed ei tohi sisaldada 
andmeid, mille abil saab otseselt kindlaks teha andmesubjekti. Viiteandmed, mille puhul 
ei ole voimalik tuvastada seost uhegi futtsilise isikuga (identifitseerimatud), peavad 
olema sellisena tahistatud. 

6. Raske kuritegu - selle kokkuleppe rakendamisel siiutegu, mille eest moistetakse karistus, 
mille tilemmaar on rohkem kui aasta pikkune vangistus, voi sellest rangem karistus. Et 
tagada oma oigusaktide jargimist, voivad pooled kokku leppida teatavate kuritegude 
tapsustamises, mille puhul pool edastab isikuandmeid artiklite 6 ja 9 kohaselt. 

a. Ameerika Uhendriikides peetakse raskeks kuriteoks ka kuritegu, mis toob kaasa isiku 
kuulutamise vastuvoetamatuks Ameerika Uhendriikides voi tema sundkorras 
valjasaatmise Ameerika Uhendriikidest fbderaalseaduse alusel. 

Artikkel 2 
Kokkuleppe eesmark 

Kokkuleppe eesmark on tohustada Ameerika Uhendriikide ja Eesti vahelist koostood raskete 
kuritegude ennetamisel ja nende vastu voitlemisel. 

Artikkel 3 
Sormejalgede andmed 

Kokkuleppe rakendamiseks tagavad pooled viiteandmete kattesaadavuse riiklikus 
sormejalgede identifitseerimise susteemis voi, selle kokkuleppe kohaselt, vajalikud andmed 
muudes asjaomastes susteemides, mis on loodud kuritegude ennetamiseks ja uurimiseks voi 
muul kriminaaloiguse eesmargil. Viiteandmete hulka kuuluvad ainult sormejalgede andmed 
ja viide. 

Artikkel 4 

Sormejalgede andmete automatiseeritud paring 

1 . Raskete kuritegude ennetamiseks ja uurimiseks voimaldavad pooled artiklis 7 nimetatud 
teise poole riiklikele kontaktpunktidele teha paringuid riiklikus sormejalgede 
identifitseerimise susteemis voi susteemides, vorreldes sormejalgede andmeid 
viiteandmetega. Oigust teha paringut voib kasutada ainult iiksikjuhtudel ja kooskolas 
paringut tegeva poole oigusega. 

2. Kindla kokkulangevuse sormejalgede andmete ja susteemi haldava poole valduses 
olevate viiteandmete vahel teevad kindlaks taotluse saanud poole riiklikud 
kontaktpunktid kindla kokkulangevuse tuvastamiseks vajalike edastatud viiteandmete 
alusel. 

Artikkel 5 

Alternatiivsed paringumeetodid isikut tuvastavate andmete alusel 

1. Artikli 4 kohase oiguse korral teha paringut tagab Eesti paringu tegemiseks 
alternatiivsed voimalused, mille puhul kasutatakse muid isikut tuvastavaid andmeid 
kindla kokkulangevuse tuvastamiseks isiku ja lisaandmete vahel. Oigust teha paringut 
kasutatakse samal viisil kui artiklis 4 ning kindlat kokkulangevust kasitletakse samal 



viisil kui sormejalgede kindlat kokkulangevust, mis voimaldab lisaandmete edastamist 
artikli 6 kohaselt. 

2. Kokkuleppega tagatud oigust teha paringut kasutatakse vaid kriminaaloiguse eesmargil, 
kui isiku suhtes, kelle kohta lisaandmeid otsitakse, on riigipiiril tuvastatud edasise 
kontrolli vajadus. 

Artikkel 6 

Taiendavate isikuandmete ja muu teabe edastamine 

Kui artiklis 4 nimetatud menetluse kaigus ilmneb sormejalgede andmete kokkulangevus, 
lahtutakse isikuandmete ja muu viiteandmetega seotud teabe edastamisel taotluse saanud 
poole 5igusest, sealhulgas oigusabi kasitlevatest satetest. 

Artikkel 7 

Riiklikud kontaktpunktid ja rakenduskokkulepped 

1. Andmete edastamiseks artiklite 4 ja 5 kohaselt maarab kumbki pool uhe voi mitu 
riiklikku kontaktpunkti. Kontaktpunktide padevus satestatakse riigisiseses oiguses. 

2. Artiklite 4 ja 5 kohaste paringute tegemise tehnilised ja menetluslikud uksikasjad 
kehtestatakse tthes voi mitmes rakenduskokkuleppes voi -lepingus. 

Artikkel 8 
DNA-profiilide automatiseeritud paring 

1 . Oma riigisisesest oigusest ning vastastikkuse pShimottest latitudes voivad pooled lubada 
teise poole riiklikule kontaktpunktile, nagu on nimetatud artiklis 10, juurdepaasu DNA- 
registrites sailitatavatele viiteandmetele oigusega teha automatiseeritud paringut DNA- 
profiilide vordlemiseks raskete kuritegude uurimisel. Paringut voib kasutada ainult 
iiksikjuhtudel ja kooskolas paringut tegeva poole oigusega. 

2. Kui automatiseeritud paring naitab, et edastatud DNA-profiil langeb kokku DNA- 
profiiliga teise poole registris, saab paringut tegeva poole riiklik kontaktpunkt 
automaatselt viiteandmed, millega kokkulangevus leiti. Kui kokkulangevust ei leitud, 
esitatakse selle kohta automaatne teatis. 

Artikkel 9 

Taiendavate isikuandmete ja muu teabe edastamine 

Kui artiklis 8 nimetatud menetluse kaigus ilmneb DNA-profiilide kokkulangevus, lahtutakse 
isikuandmete ja muu viiteandmetega seotud teabe edastamisel taotluse saanud poole 
oigusest, sealhulgas oigusabi kasitlevatest satetest. 

Artikkel 10 

Riiklik kontaktpunkt ja rakenduskokkulepped 

1. Andmete edastamiseks artikli 8 kohaselt maaravad pooled riikliku kontaktpunkti. 
Kontaktpunkti padevus satestatakse riigisiseses oiguses. 

2. Artikli 8 kohase paringu tegemise tehnilised ja menetluslikud uksikasjad kehtestatakse 
iihes voi mitmes rakenduskokkuleppes voi -lepingus. 



Artikkel 11 

Isikuandmete ja muu teabe edastamine raskete kuritegude, sealhulgas 
terrorismi ennetamiseks ja nende vastu voitlemiseks 

1. Raskete kuritegude, sealhulgas terrorismi ennetamiseks ja nende vastu voitlemiseks 
voivad pooled uksikjuhtudel, kooskolas oma oigusega, edastada ka ilma asjakohase 
taotluseta loikes 6 osutatud teise poole riiklikele kontaktpunktidele loikes 2 nimetatud 
isikuandmeid niivord, kui see on vajalik, kuna konkreetsed asjaolud annavad alust 
arvata, et andmesubjektid: 

a. panevad toime voi on toime pannud raske kuriteo voi kuuluvad organiseeritud 
kuritegelikku Uhendusse, voi 

b. panevad toime voi on toime pannud terrorikuriteo, terrorismiga seotud suttteo voi 
terroristliku iihendusega seotud siluteo, nii nagu need on maaratletud andmeid 
edastava poole oiguses, voi 

c. labivad voi on labinud valjaoppe, et panna toime punktis b nimetatud silutegusid. 

2. Edastatavad isikuandmed sisaldavad voimaluse korral perekonnanime, eesnimesid, 
endisi nimesid, teisi nimesid, varjunimesid, nimede altematiivset kirjapilti, sugu, 
sunnikuupaeva ja -kohta, praegust ja endisi kodakondsusi, passi numbrit, teiste isikut 
toendavate dokumentide numbreid ning sormejalgede andmeid, samuti koigi 
suiidimoistvate kohtuotsuste kirjeldusi ja kSiki asjaolusid, mis annavad alust arvata 
loikes 1 nimetatud sundmuste toimumist. 

3. Andmeid edastav pool voib oma riigisisese oiguse kohaselt seada andmeid saavale 
poolele nende andmete kasutamisel tingimusi. Juhul, kui andmed saanud pool votab 
sellised andmed vastu, siis on nimetatud tingimused talle siduvad. 

4. Andmeid edastav pool ei tohi maarata andmeid saavale poolele loikes 3 toodud 
tingimusena Uldisi piiranguid isikuandmete tootlemise oigusnouete kohta. 

5. Lisaks loikes 2 toodud isikuandmetele voivad pooled edastada teineteisele loikes 1 
kirjeldatud suutegudega seotud muid andmeid. 

6. Kumbki pool maarab iihe voi mitu riiklikku kontaktpunkti selle artikli kohaseks 
isikuandmete ja muude andmete vahetamiseks teise poole kontaktpunktidega. Riiklike 
kontaktpunktide padevus satestatakse riigisiseses oiguses. 

Artikkel 12 
Eraelu puutumatus ja andmekaitse 

1. Pooled tunnistavad, et teineteiselt saadavate isikuandmete tootlemisel on 
konfidentsiaalsuse sailitamine kokkuleppe rakendamisel kriitilise tahtsusega. 

2. Pooled kohustuvad tootlema isikuandmeid oiglaselt ja kooskolas oma asjakohaste 
seadustega ning: 

a. tagavad, et edastatavad isikuandmed on edastamise eesmarki silmas pidades 
kiillaldased ja asjakohased; 

b. sailitavad isikuandmeid ainult niikaua, kuni neid vajatakse sellel eesmargil, milleks 
need edastati, voi kuni neid toodeldakse edasi selle kokkuleppe kohaselt; ja 



c. tagavad, et andmeid saanud poole tahelepanu juhitakse 6igel ajal voimalikele 
ebatapsustele isikuandmetes, et teha vajalikud parandused. 

3. Kokkuleppest tulenevalt ei teki iihelgi eraisikul oigusi, sealhulgas oigust omandada, 
varjata voi jatta esitamata mis tahes tSendusmaterjali v5i takistada isikuandmete 
jagamist. Kokkuleppest soltumatuid oigusi see siiski ei mojuta. 

Artikkel 13 

Lisakaitse teatud liiki isikuandmete iileandmise korral 

1. Isikuandmeid, mis kirjeldavad isiku rassilist paritolu voi etnilist kuuluvust, poliitilisi 
veendumusi, usulisi voi muid toekspidamisi, ametiuhingu liikmesust ning 
terviseseisundit ja seksuaalelu, voib edastada vaid juhul, kui need on kokkuleppe mottes 
eriti olulised. 

2. Tunnistades ulaltoodud isikuandmete ruhmade erilist tundlikkust, rakendavad pooled 
sobilikke kaitseabinousid, eelkSige turvameetmeid, et kaitsta selliseid andmeid. 

Artikkel 14 

Isiku- ja muude andmete kaitseks seatud tootlemispiirangud 

1 . lima et see piiraks artikli 1 1 loike 3 kohaldamist, voib pool toodelda kokkuleppe alusel 
saadud andmeid: 

a. kriminaaluurimise kaigus; 

b. riigi julgeolekut ahvardava suure ohu ennetamiseks; 

c. muu kohtumenetluse kui kriminaalmenetluse voi haldusmenetluse kaigus, mis on 
punktis a toodud uurimisega otseselt seotud; voi 

d. mis tahes muul eesmargil, kuid ainult andmeid edastanud poole nousolekul. 

2. Pooled ei tohi kokkuleppe alusel saadud andmeid edastada uhelegi kolmandale riigile, 
rahvusvahelisele organisatsioonile ega fuiisilisele voi eraoiguslikule juriidilisele isikule 
ilma andmeid edastanud poole nousolekuta ja asjakohaste kaitseabinoude rakendamiseta. 

3. Artikli 4 voi 8 kohaselt voib pool teha teise poole sormejalgede voi DNA-profiilide 
siisteemis paringu ja toodelda paringus saadud andmeid, kaasa arvatud edastada 
teadaandeid kokkulangevuse kohta, uksnes selleks, et: 

a. kindlaks teha, kas vorreldavad DNA-profiilid voi sormejalgede andmed langevad 
omavahel kokku; 

b. nende andmete kokkulangevuse korral koostada ja esitada edasised abitaotlused 
riigisisese oiguse, sealhulgas oigusabi kasitlevate satete kohaselt; voi 

c. pidada arvestust, nagu nouab voi lubab riigisisene oigus. 

Siisteemi haldav pool voib andmeid, mida paringut tegev pool on artiklite 4 ja 8 kohase 
paringu kaigus talle edastanud, toodelda uksnes juhul, kui see on vajalik vordlemiseks, 
paringutele vastamisel voi artiklist 16 tuleneva arvestuse pidamiseks. V5rdlemiseks 
edastatud andmed kustutatakse viivitamata parast paringutele vastuste saamist, kui ei ole 
vajalik selliste andmete edasine tootlemine 15ike 3 punktides b ja c nimetatud eesmarkidel. 



Artikkel 15 

Andmete parandamine, sulgemine ja kustutamine 

1. Andmeid edastava poole noudmisel on andmeid saav pool kooskolas oma oigusega 
kohustatud parandama, sulgema voi kustutama kokkuleppe alusel saadud andmed, mis 
on ebaoiged voi mittetaielikud, voi kui andmete kogumine voi edasine tootlemine laheb 
vastuollu kokkuleppega voi andmeid edastavale poolele kohaldatavate eeskirjadega. 

2. Kui pool leiab, et kokkuleppe alusel teiselt poolelt saadud andmed ei ole korrektsed, 
peab ta votma k5ik asjakohased meetmed, eelkoige andmeid taiendama, kustutama voi 
parandama, et takistada ekslikku tuginemist sellistele andmetele. 

3. Pool teavitab teist poolt, kui selgub, et kokkuleppe alusel teisele poolele edastatud voi 
teiselt poolelt saadud andmed ei ole korrektsed voi usaldusvaarsed voi nende suhtes on 
pohjendatud kahtlus. 

Artikkel 16 
Dokumentatsioon 

1. Molemad pooled peavad kokkuleppe alusel teisele poolele edastatud ja teiselt poolelt 
saadud andmete registrit. Registri eesmark on: 

a. tagada andmekaitse tonus jarelevalve asjaomase poole oiguse kohaselt; 

b. voimaldada pooltele tohusalt kasutada oma oigusi artiklite 1 5 ja 1 9 kohaselt ja 

c. tagada andmeturve. 

2. Register sisaldab: 

a. teavet edastatud andmete kohta, 

b. andmeedastuse kuupaeva ja 

c. andmete saajaid, juhul kui andmed on edastatud teistele isikutele. 

3. Salvestatud andmeid tuleb sobivate meetmete abil kaitsta ebakohase kasutamise eest ja 
teiste vaarkasutuse viiside eest ning neid tuleb sailitada kaks aastat. Sailitustahtaja 
loppemisel tuleb andmed otsekohe kustutada, kui see pole vastuolus riigisisese oigusega, 
sealhulgas asjakohaste andmekaitse ja andmete sailitamise eeskirjadega. 

Artikkel 17 
Andmeturve 

1 . Pooled tagavad vajalike tehniliste ja korralduslike meetmete kasutuselevotu, et kaitsta 
isikuandmeid juhusliku voi oigusvastase havitamise, juhusliku kaotsimineku voi 
omavolilise avalikustamise, muutmise, juurdepaasu voi mis tahes loata tootlemise eest. 
Pooled vStavad eelkoige moistlikke meetmeid, mis tagavad isikuandmetele juurdepaasu 
vaid selleks volitatud isikutele. 

2. Rakenduskokkulepped voi -lepingud, mis kehtestavad kokkuleppest tulenevalt 
sormejalgede ja DNA-susteemides paringute tegemise korra, naevad ette: 

a. uusimate tehniliste meetmete asjakohase kasutamise, et tagada andmekaitse, 
andmeturve, andmete konfidentsiaalsus ja terviklus; 



b. iildiselt ligipaasetavate vorkude kasutamisel padevate asutuste tunnustatud 
krupteerimis- ja autoriseerimistoimingute kasutamise ja 

c. mehhanismi, millega tagatakse ainult lubatud paringute tegemine. 

Artikkel 18 

Labipaistvus - teabe andmine andmesubjektidele 

1. Kokkuleppe iikski sate ei muuda asjaomastes seadustes kehtestatud poolte juriidilisi 
kohustusi anda andmesubjektile teavet andmetootluse eesmargi ja andmeid kontrolliva 
isiku kohta, andmete saajate voi andmete saajate ruhmade kohta, juurdepaasuoiguse 
kohta teda puudutavatele andmetele ja nende andmete parandamise oiguse kohta ning 
mis tahes muu teabe kohta, nagu selle andmetootluse oiguslik alus, mille jaoks andmed 
on vajalikud, andmete sailitamise ja kahju huvitamise noude esitamise oiguse tahtaeg, 
niivord kuivdrd selline teave on vajalik, pidades silmas konkreetse andmetootluse 
eesmarki ja asjaolusid, et tagada andmesubjekti seisukohalt andmete oiglane kasutamine. 

2. Sellise teabe andmisest voib keelduda poolte asjakohaste seaduste alusel, kaasa arvatud 
juhul, kui teabe andmine voib kahjustada: 

a. andmetootluse eesmarki; 

b. Ameerika Uhendriikide padevate asutuste voi Eesti Vabariigi padevate asutuste 
labiviidavaid uurimistoiminguid voi kohtu alia andmist voi 

c. kolmandate poolte oigusi ja vabadusi. 

Artikkel 19 
Teave 

Taotluse korral teavitab andmeid saav pool andmeid edastavat poolt saadud andmete 
tootlemisest ning selle tulemusest. Andmeid saav pool tagab, et vastused saadetakse 
andmeid edastanud poolele oigel ajal. 

Artikkel 20 
Seos teiste lepingutega 

Kokkulepe ei mojuta Ameerika Uhendriikide ja Eesti Vabariigi vahelist teabevahetust 
reguleerivat lepingut, muud kokkulepet, toimivat oiguskoostoosuhet voi riigisisest oigust. 

Artikkel 21 
Konsultatsioonid 

1 . Pooled peavad teineteisega regulaarselt nou kokkuleppe rakendamise tile. 

2. Kokkuleppe tolgendamise voi kohaldamise ule tekkinud vaidluste korral peavad pooled 
omavahel nou lahenduse leidmiseks. 

Artikkel 22 
Kulud 

Kokkuleppe rakendamise kulud kannab kumbki pool ise. Erijuhtudel voivad pooled kokku 
leppida teistsuguses korras. 



Artikkel 23 
Kokkuleppe lopetamine 



Pool voib kokkuleppe lopetada, teatades sellest teisele poolele kirjalikult kolm kuud ette. 
Enne kokkuleppe lopetamist edastatud andmetele kohaldatakse jatkuvalt selle kokkuleppe 
satteid. 

Artikkel 24 
Muudatused 

1. Kokkuleppe muutmiseks ukskoik kumma poole taotlusel alustavad pooled 
konsultatsioone. 

2. Kokkulepet voib muuta poolte kirjalikul kokkuleppel igal ajal. 



Kokkulepe, valja arvatud artiklid 8 kuni 10, jSustub viimase sellise diplomaatilise noodi 
kuupaeval, millega pool kinnitab kokkuleppe joustumiseks vajalike nouete taitmist. 
Kokkuleppe artiklid 8 kuni 10 joustuvad artiklis 10 nimetatud rakenduskokkulepete ja - 
lepingute solmimise jarel ning viimase sellise diplomaatilise noodi kuupaeval, millega 
pooled kinnitavad, et neil on voimalik rakendada neid artikleid vastastikkuse alusel. Noote 
vahetatakse, kui molema poole seadused lubavad artiklites 8 kuni 10 silmas peetud tuiipi 
DNA-teste. 

Koostatud .st.V*:.^ aastal ...•?.9.....'?^.|*^t7. kahes eksemplaris eesti ja inglise keeles, 



Artikkel 25 
Joustumine 



tekstid on vordselt autentsed. 




Ameerika Uhendriikide 
valitsuse nimel 



Eesti Vabariigi 
valitsuse nimel 





